cd-client.yml

---
name: CD client

on:
  push:
    branches:
      - main
    paths-ignore:
      - 'apps/admin/**'
      - 'apps/api/**'
      - '**/*.md'
  pull_request:
    branches:
      - main
    paths-ignore:
      - 'apps/admin/**'
      - 'apps/api/**'
      - '**/*.md'

# cancel any previously-started, yet still active runs of this workflow on the same branch
concurrency:
  group: ${{ github.ref }}-${{ github.workflow }}
  cancel-in-progress: true

permissions:
  contents: read
  packages: write

jobs:
  client:
    name: CD client
    runs-on: ubuntu-latest
    outputs:
      image-tag: ${{ steps.image-tag.outputs.image-tag }}

    steps:
      - name: Checkout
        id: checkout
        uses: actions/checkout@v4

      - name: Set up QEMU
        id: qemu
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        id: buildx
        uses: docker/setup-buildx-action@v3

      - name: Login to GHCR
        id: login_ghcr
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Docker meta
        id: docker_meta
        uses: docker/metadata-action@v5
        with:
          # list of Docker images to use as base name for tags
          images: ghcr.io/${{ github.repository }}/client
          flavor: latest=auto
          tags: |
            type=raw,value=latest,enable={{is_default_branch}},priority=300
            type=ref,event=tag,priority=200

      - name: Docker Build and Push
        id: build_image
        uses: docker/build-push-action@v5
        with:
          platforms: linux/amd64
          context: .
          file: apps/client/Dockerfile
          target: prod
          builder: ${{ steps.buildx.outputs.name }}
          cache-from: type=gha
          cache-to: type=gha,mode=max
          push: ${{ github.event_name != 'pull_request' }}
          tags: ${{ steps.docker_meta.outputs.tags }}
          labels: ${{ steps.docker_meta.outputs.labels }}
          provenance: true
          sbom: true

      - name: Set output
        id: image-tag
        run: |
          # shellcheck disable=SC2086
          echo "image-tag=${{ steps.docker_meta.outputs.version }}" >> $GITHUB_OUTPUT

      - name: Deploy to Kubernetes
        if: github.ref == 'refs/heads/main'
        uses: actions-hub/kubectl@master
        env:
          KUBE_CONFIG: ${{ secrets.KUBE_CONFIG }}
        with:
          args: rollout restart deployment athlonix-client